Comment by uecker
2 days ago
Most people I know that had security incidents did not have this because of memory safety issues. But it does not matter, even without memory safety issues out of the picture, you would need to update your software and be wary of supply chain attacks.
(Actually, I can't remember a single incident where somebody I knew was directly affected by a memory safety issue)
> I can't remember a single incident where somebody I knew was directly affected by a memory safety issue
That doesn't mean the issue is nonexistent. See this article by Microsoft that shows the percentages of fixed CVEs that are related to memory safety.[1]
[1]: https://www.microsoft.com/en-us/msrc/blog/2019/07/we-need-a-...
Memory corruption is among the hardest things to exploit but also the most powerful. It used to be easier before things like ASLR and NX-stack.